Privacy Policy

Conversation and capture data

Conversation text submitted through the extension or paste fallback, conversation title, language, message count, capture time, and source-identifying information. We do not collect the audio itself. Raw conversation text and unapproved drafts are not synchronized across devices.

Learning data

Cards, quizzes, study spaces, review times, answer ratings, schedules, approved connections between memories, their explanations, personal cues, and short approved source excerpts. The history of pauses, splits, edits, and deletions is also retained. Pending relation suggestions and their short evidence excerpts may remain in a local browser draft; drafts are not synchronized across devices.

Account information

Your email address, authentication information, internal user ID, and timestamped AI-processing policy choices. Consent history stores the policy version and whether you accepted or revoked it, not conversation or card content. We do not receive a password; sign-in uses a secure link sent by email.

Subscription and billing data

If you use or previously used billing: plan, allowance, subscription status, billing period, and Stripe customer and subscription identifiers. Stripe processes complete payment-card details directly; Kiovio does not store them. Pausing new sales does not remove existing billing records or cancel renewals.

Device and usage data

Browser type, app version, cookies, IP address, error reason, processing time, usage count, AI token count, and other limited information needed for operation and abuse prevention. When you sign in through the companion app, Cloudflare Turnstile also processes signals including your IP address, TLS and browser fingerprint, User-Agent, and the widget sitekey and page origin to assess whether the sign-in request is automated.

Support requests

Your name, email address, request content, and support history when you contact us.

We use collected information only as needed for these purposes:

• To extract learning candidates and let you save, synchronize, and review material you approve
• To provide review scheduling, the Learning Map, progress views, and other product features
• To authenticate users, manage the free allowance, and answer requests
• To investigate failures, protect security, prevent abuse, and improve service quality
• To protect companion-app email sign-in from automated abuse using Cloudflare Turnstile
• To communicate material product, policy, billing, or security changes
• To meet legal obligations and protect legal rights

Analytics events do not include conversation text, card content, or temporary import IDs. We do not sell the substance of your learning for advertising.

Capture happens only when you click

The Chrome extension reads the conversation text displayed in the active supported ChatGPT tab only when you click the Kiovio icon. It does not monitor pages continuously, collect conversations in the background, or access microphone audio.

Temporary handoff

The extension places the captured conversation in temporary Chrome storage.session browser-session storage where only the authorized Kiovio web app can retrieve it. After the web app saves a browser draft and acknowledges the handoff, the extension removes the temporary data. An unclaimed handoff becomes unavailable after 15 minutes; Chrome may delay the cleanup alarm while the browser is suspended, and a later claim or cleanup operation also removes expired data. Kiovio does not store the conversation body in its server database for this handoff, and nothing enters your learning library until you approve it.

AI-generated learning material

To generate candidates, Kiovio sends the conversation text and required settings to the disclosed AI service provider. These requests use store:false, which disables Responses application-state storage. This does not eliminate OpenAI’s separate abuse-monitoring logs, normally retained for up to 30 days with legal or safety exceptions. OpenAI says API inputs and outputs are not used to train models by default unless you explicitly opt in; see OpenAI’s API data controls. The provider’s handling is otherwise governed by our agreement with that provider and its applicable privacy terms. Do not import confidential information or another person’s personal information unless necessary and authorized.

Before your first AI submission, the app checks your processing choice without sending the conversation. You can pause future AI extraction in Settings and continue reviewing saved material. A request already admitted or started may complete and cannot be recalled; pausing does not erase earlier replay copies, and separate deletion controls are available.

We use the following providers for the roles described below and limit the information we share to what those roles require. Cloudflare’s additional use of Turnstile signals is described below.

OpenAI

Extraction and generation of AI learning candidates

Supabase

Account authentication, cloud synchronization, and database services

Cloudflare Turnstile

Bot protection for companion-app email sign-in. Turnstile processes signals including IP address, TLS and browser fingerprint, User-Agent, and the widget sitekey and page origin. The challenge token is sent to Supabase Auth for verification and is not saved in Kiovio learning data. Cloudflare may also use Turnstile data to improve its detection systems; see Cloudflare’s Turnstile Privacy Policy.

Stripe

Payments, recurring billing, subscription management, and payment-fraud prevention for billing customers, including existing customers while new sales are paused

Hosting provider

Kiovio uses Cloudflare Workers to serve its website and API, Supabase Auth and PostgreSQL for accounts and cloud synchronization, the OpenAI API to analyze submitted conversations, and Cloudflare Turnstile to help prevent automated abuse.

We do not disclose personal data to third parties without consent except to service providers, when required by law, to protect life or property, as part of a business transfer, or where otherwise permitted by applicable law.

These providers may process information outside your country. Relevant countries, regions, and safeguards: Our Supabase project is hosted in Tokyo, Japan (ap-northeast-1). Cloudflare operates a global network, and processing by Cloudflare and OpenAI may take place outside Japan. Processing and storage across all providers are not restricted to Japan.

• Temporary handoff: Removed after the app acknowledges a saved browser draft. An unclaimed handoff becomes unavailable after 15 minutes; browser suspension can delay cleanup, and the next claim or cleanup operation removes expired data.
• Kiovio AI extraction replay copy: Available for retry for 30 days to avoid consuming another allowance or making another AI request. Access stops at expiry. Physical deletion is scheduled hourly; service incidents can delay that cleanup. You can delete replay copies sooner, and Reset learning data includes them. Limited usage and billing records remain separate from learning content.
• OpenAI API handling: These requests use store:false, which disables Responses application-state storage. OpenAI states that API inputs and outputs are not used to train models by default unless you explicitly opt in. Separate abuse-monitoring logs may be retained for up to 30 days, with legal or safety exceptions. See OpenAI’s API data controls.
• Browser data: Remains on the device until you delete it, clear site data, or replace it with a restored backup.
• Account and synchronized data: Approved material, including connections, explanations, personal cues, and short approved source excerpts, review schedules, history, conversation titles, AI-processing policy version and choice history, and other limited metadata are retained while the account is active and for the period required to complete account deletion. Raw conversation text, source turns, pending relation suggestions, other unapproved drafts, and analytics events are not synchronized.
• Billing and accounting records: Retained where required by applicable law. Customers with billing records currently need a verified Support request for account deletion; removing learning content does not cancel a subscription.
• Security and failure logs: Standard Cloudflare Workers Logs have retention periods of 3 days on Free plans and 7 days on Paid plans. Supabase publishes API and database log retention periods of 1–90 days depending on the plan; Auth audit log periods differ. These operational log windows do not guarantee deletion of every provider-held record. Kiovio disables stored OpenAI responses, but OpenAI may retain abuse-monitoring logs containing submitted content for up to 30 days, or longer for legal requirements or when reasonably necessary to protect its services or others from harm.

We use safeguards appropriate to the information, including access controls, encrypted transport, limited privileges, monitoring, and backups. No internet transmission or storage system can be guaranteed to be absolutely secure.

Through Settings or a verified support request, you can:

• View, edit, export, or delete learning cards, conversations, drafts, and review history
• Review or correct account information, or delete the account
• Pause future AI processing, re-enable it, or delete AI replay copies without losing access to saved review material
• Cancel automatic renewal and review billing history, including while new sales are paused
• Exercise access, correction, restriction, objection, or deletion rights available under applicable law

Disabling browser cookies may prevent sign-in persistence, guest allowance management, and other features from working.

Data controller or responsible operator

Ken Uehara

Address

Room 405, Yamato Building, 1-6-16 Kanda-Izumicho, Chiyoda-ku, Tokyo, Japan

Privacy contact

support@kiovio.com

See Support for request instructions and the information needed to verify identity.

If this policy changes, this page will show the change and effective date. Material changes will be announced in the service or sent to the registered email address in advance.